gbk76 Privacy Policy

1 Introduction

gbk76 ("we", "our", "us") operates the online sports betting and casino platform accessible at gbk76.bio (the "Platform"). We are committed to protecting the personal data of every individual who visits, registers with, or interacts with our Platform. This Privacy Policy describes the types of information we collect, the purposes for which that information is processed, and the measures we take to safeguard it.

gbk76 serves members primarily based in Indonesia, including players who engage with football betting on the BRI Liga 1, international competitions such as the Champions League and AFF Cup, live casino games, premium slots from Pragmatic Play and Evolution Gaming, and togel (Indonesia's traditional numbers lottery) markets. Regardless of the product you use, the same privacy standards apply across the entire Platform.

This Policy applies to all personal data collected through the Platform, including data collected via our website, mobile interface, live chat support system, and any communications you send to gbk76 support. It does not apply to the privacy practices of third-party providers whose services are accessible through our Platform — those providers operate under their own separate privacy frameworks, which we encourage you to review.

This Policy is written in English, consistent with gbk76's status as an international English-language platform serving English-preference users in Indonesia. If any translation of this Policy is provided for reference, the English version shall govern in the event of any conflict or ambiguity.

2 Data We Collect

We collect only the minimum personal data necessary to provide our Services, comply with our legal and regulatory obligations, and maintain the integrity of the Platform. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name — as provided during account registration and KYC verification.
• Date of birth — used to confirm that you meet the minimum age requirement of 21 years.
• Residential address — including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan) and postal code.
• Email address — used for account communications, security alerts, and promotional messages (where consented).
• Phone number — used for account verification and two-factor authentication where applicable.

2.2 Identification & Verification Documents

• Government-issued ID — such as your Indonesian National Identity Card (KTP), passport, or driver's licence, collected as part of our Know Your Customer (KYC) process.
• Proof of address — such as a utility bill or bank statement issued within the past three months.
• Payment method ownership confirmation — such as a screenshot or statement confirming that the BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account used for deposits belongs to you.

2.3 Financial Data

• Bank account numbers and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your gbk76 account for deposit and withdrawal purposes.
• Transaction history — including deposit amounts, withdrawal requests, wager values, and balance movements, all denominated in Indonesian Rupiah (IDR).
• Source-of-funds information, requested where a regulatory obligation or enhanced due diligence trigger applies.

2.4 Technical & Usage Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Session data — including login timestamps, session duration, pages visited, games played, and in-session navigation paths.
• Geolocation data derived from your IP address (not GPS-level tracking).
• Referral source — how you arrived at the gbk76 Platform (e.g., organic search, direct URL).

2.5 Communications Data

• Records of your interactions with our customer support team via live chat, including chat transcripts and any attachments you provide.
• Email correspondence sent to [email protected], including any personal information you voluntarily include in your messages.
• Responsible gaming communications — including self-exclusion requests, deposit limit change requests, and cooling-off period applications.

3 How We Collect Your Data

gbk76 collects personal data through the following channels and methods:

• Account registration: When you complete the sign-up form on the gbk76 Platform, you provide identity, contact, and date-of-birth information directly to us.
• KYC verification: When we request identity documents to verify your account, you upload those documents directly to our secure verification portal.
• Deposits and withdrawals: Payment transaction data — including bank account or e-wallet identifiers and transaction amounts in IDR — is collected when you initiate financial transactions on the Platform.
• Betting and gaming activity: Data about the bets you place, games you play, stakes, odds accepted, and outcomes is generated automatically as you use the Platform.
• Cookies and tracking technologies: When you browse the Platform, we use cookies and similar technologies to collect technical and usage data automatically. See Section 6 for full details.
• Support interactions: When you contact our support team via live chat or email, we record and store the content of those communications.
• Third-party services: We may receive limited data about you from third-party payment processors, KYC verification providers, and fraud-detection services that we use to operate the Platform securely.

4 How We Use Your Data

gbk76 processes your personal data for the following lawful purposes. We do not process your data for any purpose incompatible with those listed below.

5 Data Sharing & Disclosure

gbk76 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data only in the strictly limited circumstances described below:

• Payment processors and banking partners: We share the financial data necessary to process your deposits and withdrawals with our partner payment providers, including local Indonesian bank transfer services (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and QRIS payment network operators. These providers are contractually bound to process your data only for payment fulfilment purposes.
• KYC and identity verification providers: We use trusted third-party KYC service providers to verify the authenticity of identity documents you submit. These providers access only the specific documents and data needed to complete the verification check.
• Game content providers: When you play games hosted by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — a session token and your account identifier are shared with that provider to enable the game session. These studios are independently certified and operate under their own licensed privacy frameworks.
• Fraud prevention and security services: We may share technical identifiers (IP address, device fingerprint, session metadata) with specialist fraud-detection and cybersecurity service providers to protect the Platform and its members from fraudulent activity.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are compelled to do so by a valid legal order, warrant, or binding regulatory requirement. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all assets of gbk76, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity upholding equivalent privacy protections. You will be notified of any such transfer.

6 Cookies & Tracking Technologies

gbk76 uses cookies and similar client-side technologies (including local storage and session storage) to operate the Platform efficiently, remember your preferences, and understand how members use our services. Below is a summary of the cookie categories we use:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect certain features of the Platform — for example, your language and display preferences will not be retained between sessions. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

gbk76 does not use any third-party advertising or retargeting cookies. We do not share cookie-derived data with advertising networks or social media platforms.

7 Data Retention

gbk76 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following retention schedule applies:

• Active Account data: Retained for the full duration of your membership and for a minimum of five (5) years following account closure, in line with standard anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later. Documents that fail verification are securely deleted within 30 days of the failed verification outcome.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with financial record-keeping obligations.
• Customer support communications: Retained for two (2) years from the date of the last interaction to support dispute resolution and quality assurance purposes.
• Session and technical logs: Retained for up to ninety (90) days in operational form, after which they are either deleted or anonymised for long-term analytics purposes.
• Responsible gaming records: Self-exclusion requests, deposit limit settings, and cooling-off period applications are retained for a minimum of seven (7) years to prevent circumvention and to support member welfare obligations.
• Marketing consent records: Retained for the duration of your marketing subscription plus three (3) years after opt-out, to demonstrate consent compliance.

When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked back to any individual.

8 Data Security

gbk76 applies a layered, defence-in-depth security approach to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit TLS/SSL encryption: All data transmitted between your device and the gbk76 Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at rest: Sensitive personal data stored on gbk76 servers — including identity documents and financial records — is encrypted using AES-256 encryption at rest.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. gbk76 staff are granted data access only to the extent required to perform their specific role. All access events are logged and audited.
• Password hashing: Account passwords are never stored in plain text. We use a strong adaptive hashing algorithm (bcrypt) with per-user salts to protect credential data.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously by automated systems that detect and alert on anomalous access patterns, brute-force attempts, and other suspicious activities.
• Regular security assessments: gbk76 conducts periodic penetration testing and vulnerability assessments of our Platform and infrastructure. Critical findings are remediated on a priority basis.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, gbk76 will notify affected members and relevant authorities within the timeframe required by applicable data protection law.

9 Your Data Rights

As a gbk76 member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within thirty (30) days.

Please note that certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain for anti-money-laundering or record-keeping purposes. Where we decline to act on a request, we will explain our reasoning in writing.

10 Minors & Age Restriction

The gbk76 Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect or process personal data belonging to anyone under 21 years of age. Age verification (21+) is a mandatory step in the account registration and KYC process.

If gbk76 discovers or is notified that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void all associated bets and winnings, initiate a full refund of any real-money deposits (net of any bonus funds credited), and permanently delete all personal data associated with that account within 30 days of confirmation.

Parents or legal guardians who believe their child under the age of 21 may have accessed the gbk76 Platform are urged to contact us immediately at [email protected]. We will investigate promptly and take all appropriate action.

11 Third-Party Services & Links

The gbk76 Platform may contain references to, or integrate with, third-party services — most notably game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, QRIS). When you interact with these services through the gbk76 Platform:

• Third-party game providers may collect certain technical session data directly from your device as part of delivering the game content. That data is governed by the game provider's own privacy policy, not by this one.
• Payment providers process your financial transaction data under their own regulatory frameworks and privacy policies. gbk76 does not have visibility into the internal data handling practices of BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay beyond what is disclosed in their respective public privacy policies.
• gbk76 is not responsible for the privacy practices, security measures, or content of any third-party service. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with the gbk76 Platform.
• We perform due-diligence assessments on all third-party partners before integration and require them to maintain adequate data protection standards as a condition of our commercial relationship.

12 Cross-Border Data Transfers

gbk76 operates as an internationally licensed platform. Your personal data may be processed on servers located outside of Indonesia, including in jurisdictions where data protection laws may differ from those applicable in your home country. In all cases, gbk76 ensures that cross-border data transfers are protected by one or more of the following safeguards:

• Contractual protections: We execute standard contractual clauses or equivalent data transfer agreements with all recipients of personal data in other jurisdictions, obligating them to maintain equivalent data protection standards.
• Adequacy assessments: Where data is transferred to a jurisdiction that has been assessed as providing an adequate level of data protection by relevant international standards, we rely on that adequacy determination.
• Technical safeguards: All data transmitted across borders is encrypted in transit using TLS 1.2 or higher, ensuring that it cannot be intercepted or read by unauthorised parties during transmission.
• Minimisation: We transfer only the minimum data necessary to achieve the specific operational purpose, and we prohibit onward transfer by data processors without our prior written consent.

If you would like further information about the specific safeguards applied to cross-border transfers of your personal data, please contact us at [email protected].

13 Changes to This Policy

gbk76 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy, we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this page.
• Display a prominent notice on the gbk76 Platform informing members that the Privacy Policy has been updated.
• Send an email notification to all registered members at their account email address, summarising the key changes, where the changes are significant enough to materially affect your rights.

Your continued use of the gbk76 Platform after the updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data. Previous versions of this Policy are available upon request.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gbk76 handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

When submitting a data rights request (e.g., a request for access, rectification, or erasure), please include your registered account username and the email address associated with your gbk76 account so that we can verify your identity before processing the request. We may ask for additional verification if the nature of the request requires it.